1 Reply Latest reply: May 27, 2013 5:48 PM by tjaynes RSS

    Mcafee IPS Intrushield signature help




      Im relatively new to the Mcafee IPS product but im a certified Intrusion Analyst so have a basic understanding of network toplogies and packet anaysis etc. Im trying to find out exactly what the following signature means and why it may be firing on the network i look after. The signature is "Kerberos: TGT renew message detected". I have several hundred of these alerts and cant advise the system admins what remedial action to take to remedy this. Any help would be appreciated. The IPS product we use is Intrushield NSM version 5.1